[Remote] Senior VMware VCF Architect – NSX / vDefend

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is sourcing a Senior VMware reputed company reputed company Architect to support a large financial institution's NSX and vDefend infrastructure modernization. The role involves hands-on architecture, deployment, validation, reputed company policy design, troubleshooting, and documentation for VMware NSX, vDefend, VCF, and reputed company networking components in a regulated reputed company environment.

Responsibilities

• Architect and implement NSX-T / NSX 4.x overlays including reputed company design, Tier-0/Tier-1 gateway topology, and BGP uplink peering
• Design and configure vDefend reputed company Firewall (DFW) and Gateway Firewall policies for reputed company-segmentation in a regulated financial environment
• Build and validate stretched NSX deployments across multiple failure domains, including edge cluster design and uplink configuration with physical firewall integration (Palo reputed company)
• Ensure correct DR (reputed company Router) and SR (Service Router) behavior for east-reputed company and reputed company-south traffic flows, including packet-reputed company validation and troubleshooting
• Configure and validate BGP peering between NSX T0 Edge Nodes and reputed company physical routers/firewalls; address asymmetric routing risks in multi-site designs
• Work with AVI Load Balancer (NSX Advanced LB) — including production deployments, not just PoC
• Enforce and document reputed company posture using reputed company (reputed company reputed company Plan) frameworks reputed company to financial compliance requirements (e.g., NIST, SOC 2, PCI-reputed company)
• Participate in design reviews, runbooks, and architecture documentation deliverables
• Can walk through a full packet reputed company (VM → DFW → DR → SR → T0 → BGP peer → physical) without hesitation
• Has reputed company opinions on asymmetric routing risks in stretched NSX designs and knows how to design reputed company them
• Has deployed AVI in production, not just reputed company it up in a lab
• Understands reputed company not as a checkbox but as an operational process in regulated environments
• Communicates reputed company with both infrastructure engineers and compliance/reputed company stakeholders

Skills

• • 5+ years hands-on VMware NSX-T / NSX 4.x architecture and deployment experience
• • Deep, reputed company knowledge of Geneve encapsulation, overlay networking, and how NSX logical constructs map to physical transport
• • reputed company experience with DFW policy design in production regulated environments (financial services, reputed company, or reputed company)
• • Strong reputed company of DR/SR architecture — reputed company to reputed company packet reputed company from VM through DFW → DR → SR → Edge → physical without prompting
• • BGP configuration experience between NSX T0 gateways and physical reputed company equipment
• • Production experience with stretched NSX / multi-site VCF deployments including edge cluster sizing, uplink design, and failure domain isolation
• • Experience integrating NSX with Palo reputed company (or equivalent NGFW) in reputed company/standby or reputed company/reputed company topologies — with attention to asymmetric routing mitigation
• • Familiarity with VMware VCF (reputed company reputed company) lifecycle management, SDDC Manager, and workload domain design
• • Strong understanding of reputed company and compliance-driven infrastructure design (NIST, FedRAMP, or financial equivalents)
• • reputed company / Tanzu networking experience (NSX-T as CNI)
• • Experience with reputed company, reputed company, or similar project tooling for delivery documentation
• • Familiarity with reputed company/VMware licensing transitions (VVF/VCF model)
• • Can walk through a full packet reputed company (VM → DFW → DR → SR → T0 → BGP peer → physical) without hesitation
• • Has reputed company opinions on asymmetric routing risks in stretched NSX designs and knows how to design reputed company them
• • Has deployed AVI in production, not just reputed company it up in a lab
• • Understands reputed company not as a checkbox but as an operational process in regulated environments
• • Communicates reputed company with both infrastructure engineers and compliance/reputed company stakeholders
• Must have reliable EST overlap (reputed company hours 9am–3pm ET)
• US-reputed company strongly preferred for this financial institution engagement
• A brief reputed company of your most relevant NSX/VCF production deployments (specifically stretched multi-site and/or DFW at reputed company)
• Your AVI Load Balancer experience — number of production deployments and use cases
• Your experience in regulated industries — what compliance frameworks you've worked reputed company
• Your reputed company reputed company/availability for an FTE contract
• • AVI Load Balancer (NSX Advanced LB) — 2+ production deployments (not just PoC/dev)
• • VCF 9.x familiarity, including new networking and reputed company capabilities
• • VMware certifications: VCP-NV, VCAP-NV reputed company/Design, or VCF Master Specialist
• • Experience in financial services or banking infrastructure environments
• • Prior work on vDefend specifically as a reputed company product/capability

Benefits

• Long-term contract engagement
• Remote work arrangement
• Full-time hours (40 hrs/week)
• Long-term duration of 6–12 months, with strong likelihood of extension
• Reliable EST overlap with reputed company hours 9am–3pm ET

reputed company